ESET Mobile SecurityWindows Mobile

Installation Manual and User Guide

ESET Mobile Security

Copyright ©2010 by ESET, spol. s.r.o.ESET Mobile Security was developed by ESET, spol. s r.o.For more information visit www.eset.com.All rights reserved. No part of this documentation may bereproduced, stored in a retrieval system or transmitted inany form or by any means, electronic, mechanical,photocopying, recording, scanning, or otherwise withoutpermission in writing from the author.ESET, spol. s r.o. reserves the right to change any of thedescribed application software without prior notice.

Customer Care Worldwide: www.eset.eu/supportCustomer Care North America: www.eset.com/support

REV. 10/28/2010

Contents

..............................................31. Installation of ESET Mobile Security....................................................................3Minimum system requirements1.1....................................................................3Installation1.2

.......................................................................3Installation on your device1.2.1

.......................................................................3Installation using your computer1.2.2....................................................................4Uninstallation1.3

..............................................52. Product activation....................................................................5Activation using login and password2.1....................................................................5Activation using registration key2.2

..............................................63. Update....................................................................6Settings3.1

..............................................74. On-access scanner....................................................................7Settings4.1

..............................................85. On-demand scanner....................................................................8Running a whole device scan5.1....................................................................8Scanning a folder5.2....................................................................9General settings5.3....................................................................9Extensions settings5.4

..............................................106. Threat found....................................................................10Quarantine6.1

..............................................117. Anti-Theft....................................................................11Settings7.1

..............................................138. Firewall....................................................................13Settings8.1

..............................................159. Security audit....................................................................15Settings9.1

..............................................1710. Antispam....................................................................17Settings10.1....................................................................17Whitelist / Blacklist10.2....................................................................18Locating spam messages10.3....................................................................18Deleting spam messages10.4

..............................................1911. Viewing logs and statistics

..............................................2112. Troubleshooting and support....................................................................21Troubleshooting12.1

.......................................................................21Unsuccessful installation12.1.1

.......................................................................21Connection to update server failed12.1.2

.......................................................................21Timeout downloading file12.1.3

.......................................................................21Update file missing12.1.4

.......................................................................21Database file corrupted12.1.5....................................................................21Technical support12.2

3

1. Installation of ESET MobileSecurity

1.1 Minimum system requirements

To install ESET Mobile Security for Windows Mobile, yourmobile device must meet following system requirements:

Minimum system requirements

Operating system Windows Mobile 5.0 and later

Processor 200 MHz

Memory 16 MB

Available free space 2.5 MB

1.2 Installation

Save all open documents and exit all running applicationsbefore installing. You can install ESET Mobile Securitydirectly on your device or use your computer to install it.

After successful installation, activate ESET Mobile Securityby following the steps in the Product activationsection.

1.2.1 Installation on your device

To install ESET Mobile Security directly on your device,download the .cab installation file onto your device byWi-Fi, Bluetooth, USB file transfer or email attachment.Go to Start > Programs > File Explorer to locate the file.Tap the file to launch the installer and then follow theprompts in the installation wizard.

Installing ESET Mobile Security

NOTE: The Windows Mobile user interface varies bydevice model. The installation file may appear in adifferent menu or folder on your device.

Installation progress

After installation, you can modify the program settings.However, the default configuration provides themaximum level of protection against malicious programs.

1.2.2 Installation using your computer

To install ESET Mobile Security using your computer,connect your mobile device to the computer viaActiveSync (in Windows XP) or Windows Mobile DeviceCenter (in Windows 7 and Vista). After the device isrecognized, run the downloaded installation package (exefile) and follow the instructions in the installation wizard.

Launching the installer on your computer

Then follow the prompts on your mobile device.

5

4

1.3 Uninstallation

To uninstall ESET Mobile Security from your mobiledevice, tap Start > Settings, tap the System taband then tap the Remove Programs icon.

NOTE: The Windows Mobile user interface varies bydevice model. These options may be slightly different onyour device.

Removing ESET Mobile Security

Select ESET Mobile Security and tap Remove. Tap Yeswhen prompted to confirm the uninstallation.

Removing ESET Mobile Security

5

2. Product activation

The main ESET Mobile Security window (Start >Programs > ESET Mobile Security) is the starting pointfor all instructions in this manual.

The main ESET Mobile Security window

After a successful installation, ESET Mobile Security mustbe activated. If you are not prompted to activate yourproduct, tap Menu > Activate.

Program activation

There are two activation methods; the one that applies toyou will depend on the manner in which you acquiredyour ESET Mobile Security product.

2.1 Activation using login and password

If you purchased your product from a distributor, youreceived a login and password with your purchase. Selectthe Login/Password option and enter the informationyou received in the Login and Password fields. Enteryour current contact address in the Email field. TapActivate to complete the activation.

2.2 Activation using registration key

If you acquired ESET Mobile Security with a new device(or as a boxed product), you received a Registration keywith your purchase. Select the Registration key option,enter the information you received in the Key field andyour current contact address in the Email field. TapActivate to complete the activation. Your newauthentication data (Login and Password) willautomatically replace the Registration key and will besent to the email address you specified.

In both cases you will receive a confirmation email abouta successful product activation.

Each activation is valid for a fixed period of time. After theactivation expires, it will be necessary to renew theprogram license (the program will notify you about this inadvance).

NOTE: During activation, the device must be connectedto the Internet. A small amount of data will bedownloaded. These transfers are charged according toyour service agreement with your mobile provider.

6

3. Update

By default, ESET Mobile Security is installed with anupdate task to ensure that the program is updatedregularly. You can also perform updates manually.

After installation, we recommend you run the first updatemanually. To do so, tap Action > Update.

3.1 Settings

To configure update settings, tap Menu > Settings >Update.

The Internet Update option enables or disablesautomatic updates.

You can specify the Update Server from which updatesare downloaded (we recommend leaving the defaultsetting of updmobile.eset.com).

To set the time interval for the automatic updates, usethe Auto Update option.

Update settings

NOTE: To prevent unnecessary bandwidth usage, virussignature database updates are issued as needed, when anew threat is added. While virus signature databaseupdates are free with your active license, you may becharged by your mobile service provider for datatransfers.

7

4. On-access scanner

The On-access scanner checks files that you interact within real time. Files that are run, opened or saved arechecked for threats automatically. Scanning takes placebefore any action is performed on a file, ensuringmaximum protection with default settings. The On-access scanner launches automatically at system startup.

4.1 Settings

Tap Menu > Settings > On-access to enable or disablefollowing options:

Enable On-access Scan – If enabled, the On-accessscanner runs in the background.Heuristics – Select this option to apply heuristicscanning techniques. Heuristics proactively identifynew malware not yet detected by the virus signaturedatabase by analyzing code and recognizing typicalvirus behavior. Its disadvantage is that additional timeis required to complete the scan.Run After Restart – If selected, the On-access scannerwill automatically start after restart of the device.Display scan in action status – Select this option toshow scan status in the bottom right corner whilescanning is in progress.Show shell icon - displays the quick access icon of theOn-access settings (in the bottom right corner of theWindows Mobile Start screen).Show splash screen - this option allows you to turn offthe ESET Mobile Security splash screen shown duringthe startup of your device.

On-access scanner settings

8

5. On-demand scanner

You can use the On-demand scanner to check yourmobile device for the presence of infiltrations. Certainpredefined file types are scanned by default.

5.1 Running a whole device scan

A whole device scan checks memory, running processes,their dependent dynamic link libraries (DLLs) and filesthat are part of internal and removable storage.

To run a whole device scan, tap Action > Scan > Wholedevice.

NOTE: A memory scan is not performed by default. Youcan enable it in Menu > Settings > General.

Running a whole device scan

The program scans system memory first (includingrunning processes and their dependent DLLs) and thenscans files and folders. The full path and file name of eachscanned file will be displayed briefly.

NOTE: To abort a scan in progress, tap Action > Scan >Stop Scan.

5.2 Scanning a folder

To scan a particular folder on your device, tap Action >Scan > Folder.

Scanning a folder

Tap the folder you wish to scan and tap Select.

Selecting a folder to scan

9

5.3 General settings

To modify scanning parameters, tap Menu > Settings >General.

General settings

Select the Show alert dialog option to display threatalert notifications.

You can specify a default action that will be performedautomatically when infected files are detected. You canchoose from the following options:

QuarantineDeleteDo Nothing (not recommended)

The Stored Logs option allows you to define themaximum number of logs to be stored in the Menu >Logs > Scan section.

If the Memory Scan is enabled, the device memory willbe automatically scanned for malicious programs prior tothe actual file scan.

If the Heuristics option is enabled, ESET Mobile Securitywill use heuristic scanning techniques. Heuristics is analgorithm-based detection method that analyzes codeand searches for typical virus behavior. Its mainadvantage is the ability to identify malicious software notyet recognized in the current virus signature database. Itsdisadvantage is that additional time is required tocomplete the scan.

The Archive Nesting option allows you to specify thedepth of nested archives to be scanned. (The higher thenumber, the deeper the scan.)

If the Archive Deletion option is enabled, archive files (zip, rar and jar) containing infected objects will beautomatically deleted.

5.4 Extensions settings

To specify the file types to be scanned on your mobiledevice, tap Menu > Settings > Extensions.

The Extensions window will be displayed, showing themost common file types exposed to infiltration. Select thefile types you wish to scan or deselect the extensions toexclude them from scanning. If you enable the Archivesoption, all supported archive files (zip, rar and jar) will bescanned.

To scan all files, deselect the Extension sensitivecheckbox.

Extensions settings

10

6. Threat found

If a threat is found, ESET Mobile Security will prompt youto take an action.

Threat alert dialog

We recommend you select Delete. If you selectQuarantine, the file will be moved from its originallocation to quarantine. If you select Ignore, no action willbe performed and the infected file will remain on yourmobile device.

If an infiltration is detected in an archive (e.g., .zip file),the Delete archive option is available in the alertwindow. Select this option along with the Delete optionto delete all archived files.

If you disable the Show alert dialog option, no alertwindows will be displayed during the current scan (todisable alerts for all future scans, see the General settings

).

6.1 Quarantine

The main task of the quarantine is to safely store infectedfiles. Files should be quarantined if they cannot becleaned, if it is not safe or advisable to delete them or ifthey are being falsely detected by ESET Mobile Security.

Files stored in the quarantine folder can be viewed in alog that displays the date and time of quarantine andoriginal location of the infected file. To open quarantine,tap Menu > View > Quarantine.

Quarantine List

You can restore quarantined files by tapping Menu >Restore (each file will be restored to its original location).If you wish to permanently remove the files, tap Menu >Delete.

9

11

7. Anti-Theft

The Anti-Theft feature protects your mobile phone fromunauthorized access.

If you lose your phone or someone steals it and replacesyour SIM card with a new (untrusted) one, an Alert SMSwill be secretly sent to certain user-defined phonenumber(s). This message will include the phone numberof the currently inserted SIM card, the IMSI (InternationalMobile Subscriber Identity) number and the phone's IMEI(International Mobile Equipment Identity) number. Theunauthorized user will not be aware that this messagehas been sent, since it will be automatically deleted fromthe Sent folder.

To erase all data (contacts, messages, applications) storedon your device and all currently inserted removablemedia, you can send a Remote wipe SMS to theunauthorized user's mobile number in the following form:#RC# DS passwordwhere password is your own password set in Menu >Settings > Password.

7.1 Settings

First, set your password in Menu > Settings > Password.This password is required when:

sending a Remote wipe SMS to your deviceaccessing the Anti-Theft settings on your deviceuninstalling ESET Mobile Security from your device.

To set a new password, type your password in Newpassword and Retype password fields. The Reminderoption (if set) displays a hint in case you do not rememberyour password.

To change existing password, Enter current passwordfirst and then fill in new password.

IMPORTANT: Please choose your password carefully asthis will be required when uninstalling ESET MobileSecurity from your device.

Setting a security password

To access Anti-Theft settings, tap Menu > Settings >Anti-Theft and enter your password.

To disable automatic checking of inserted SIM card (andpossible sending of Alert SMS), deselect the Enable SIMmatching option.

If the SIM card currently inserted in your mobile device isthe one you wish to save as trusted, check the CurrentSIM is trusted check box and the SIM will be saved to theTrusted SIM list (Trusted SIM tab). The SIM Alias textbox will be automatically filled with IMSI number.

If you are using more than one SIM card, you may wantto distinguish each one by modifying its SIM Alias (e.g.,Office, Home etc.).

In Alert SMS, you can modify the text message that willbe sent to the predefined number(s) after an untrustedSIM card is inserted in your device.

12

Anti-Theft settings

The Alert Recipients tab shows the list of predefinednumbers that will receive an Alert SMS after an untrustedSIM card is inserted in your device.To add a new number,tap Menu > Add. To add a number from the contact list,tap Menu > Add contact.

NOTE: the phone number must include the internationaldialing code followed by the actual number (e.g., +16105552000).

Predefined phone numbers list

The Trusted SIM tab shows the list of trusted SIM cards.Each entry consists of the SIM Alias (left column) and IMSInumber (right column).

To remove a SIM from the list, select the SIM and tap Menu > Remove.

Trusted SIM list

13

8. Firewall

The Firewall controls all inbound and outbound networktraffic by allowing or denying individual connectionsbased on filtering rules.

Firewall alert

8.1 Settings

To modify the Firewall settings, tap Menu > Settings >Firewall.

Firewall settings

You can choose from the following profiles:Allow All - allows all network trafficBlock All - blocks all network trafficCustom Rules - lets you define your own filtering rules

While in the Custom Rules profile, you can choose fromtwo filtering modes:

Automatic - suitable for users who prefer easy andconvenient use of the firewall with no need to define

rules. This mode allows all outbound traffic. For theinbound traffic, you can set a default action (DefaultAllow or Default Block) in Behavior option.Interactive - allows you to customize your personalfirewall. When a communication without acorresponding rule is detected, a dialog windowreporting an unknown connection is displayed. Thedialog window gives the option to allow or block thecommunication and to create a rule. If you choose tocreate a rule, all such future connections will be allowedor blocked according to the rule. If an application withan existing rule has been modified, a dialog windowgives you the option to accept or deny this change. Theexisting rule will be modified based on your response.

Block roaming data - if enabled, ESET Mobile Securityautomatically detects if your device is connected to aroaming network and blocks both incoming andoutgoing data. This option does not block the datareceived via Wi-Fi or GPRS.

Allow this MMS connection - choose a connection forreceiving MMS messages in a roaming network. MMSmessages from other connections will be blocked by ESETMobile Security.

In the Rules tab, you can edit or remove existing filteringrules.

Firewall rules list

14

To create a new rule, tap Menu > Add, fill in all therequired fields and tap Done.

Creating a new rule

15

9. Security audit

The Security audit checks the phone's status regardingbattery level, bluetooth status, free disk space, etc.

To run a Security audit manually, tap Action > Securityaudit. A detailed report will be displayed.

Security audit results

A green color next to each item indicates that the value isabove the threshold or that the item does not represent asecurity risk. Red color means that the value is below thethreshold or that the item could represent a potentialsecurity risk.

If Bluetooth Status or Device Visibility is highlighted inred, you can turn off its status by selecting the item andtapping Menu > Fix.

To see each item's details, select the item and tap Menu >Details.

Running Processes

The Running Processes option shows the list of allprocesses running on your device.

To see the process details (full path name of the processand its memory usage), select the process and tap Details.

9.1 Settings

To modify Security audit parameters, tap Menu >Settings > Security audit.

Security audit settings

If the Fix automatically option is enabled, ESET MobileSecurity will automatically attempt to fix the items at risk(e.g., bluetooth status, device visibility) without userinteraction. This setting only applies to an automatic(scheduled) audit.

The Audit Period option allows you to choose how oftenthe automatic audit will be performed. If you wish todisable the automatic audit, select Never.

You can adjust the threshold value at which the Free DiskSpace and Battery Level will be considered as low.

16

In the Items to Audit tab, you can select the items to bechecked during the automatic (scheduled) security audit.

Automatic audit settings

17

10. Antispam

The Antispam module blocks unsolicited SMS and MMSmessages sent to your mobile device.

Unsolicited messages usually include advertisementsfrom mobile phone service providers or messages fromunknown or unspecified users.

10.1 Settings

Tap Menu > View > Statistics to see statisticalinformation about received and blocked messages.

In the Antispam settings (Menu > Settings > Antispam),the following filtering modes are available:

Block unknown contacts – Enable this option toaccept messages only from contacts in your addressbook.Block known contacts – Enable this option to receivemessages only from senders not included in youraddress book.Enable both Block unknown contacts and Blockknown contacts to automatically block all incomingmessages.Disable both Block unknown contacts and Blockknown contacts to turn off the Antispam. Allincoming messages will be accepted.

NOTE: The Whitelist and Blacklist entries override theseoptions (see Whitelist / Blacklist section).

Antispam settings

10.2 Whitelist / Blacklist

The Blacklist is a list of phone numbers from which allmessages are blocked. Entries listed here override alloptions in the Antispam settings (Settings tab).

The Whitelist is a list of phone numbers from which allmessages are accepted. Entries listed here override alloptions in the Antispam settings (Settings tab).

Blacklist

To add a new number to the Whitelist/Blacklist, select thetab for the list you wish to modify and tap Menu > Add.To add a number from the contact list, tap Menu > Addcontact.

Warning: Adding a number/contact to the blacklist willautomatically and silently move messages from thatsender to the Spam folder.

17

18

10.3 Locating spam messages

The Spam folder is used to store blocked messagescategorized as spam according to the Antispam settings.The folder is automatically created when the first spammessage is received. To locate the Spam folder andreview blocked messages, follow the steps below:

1. Open the program your device uses for messaging, e.g. Messaging from the Start menu

2. Tap Text Messages (or MMS if you wish to locate theMMS Spam folder)

3. Tap Menu > Go To > Folders ... (or Menu > Folders onthe smartphones)

4. Select the Spam folder.

Spam folder

10.4 Deleting spam messages

To delete spam messages from your mobile device, followthe steps below:1. Tap Menu >Settings > Antispam from the ESET

Mobile Security main window2. Tap Purge spam3. Tap Yes to confirm the deletion of all spam messages.

Deleting Spam messages

19

11. Viewing logs and statistics

The Scan log section (Menu > Logs > Scan) contains logsproviding comprehensive data about completed scantasks. Logs are created after each successful On-demandscan or when an infiltration is detected by the On-accessscan. All infected files are highlighted in red. At the end ofeach log entry is an explanation of why the file wasincluded in the log.

Scan logs contain:log file name (usually in the form Scan.Number.log)date and time of the eventlist of scanned filesactions performed or errors encountered during thescan

Scan log

The Security audit log section (Menu > Logs > Securityaudit) stores all security audit results from bothautomatic (scheduled) audit and manually triggeredaudit.

Security audit logs contain:log file name (in the form auditNumber.log)date and time of auditdetailed results

Security audit log

The Firewall Log (Menu > Logs > Firewall) contains theinformation about the firewall events blocked by ESETMobile Security. The log is updated after everycommunication performed through the firewall. Newevents appear on the top of the log.

Firewall Log contains:date and time of the eventname of the rule usedaction performed (based on the rule settings)source IP addressdestination IP addressprotocol used

Firewall log

20

The Statistics screen (Menu > View > Statistics)displays a summary of:

files scanned by the On-access scannerreceived and blocked messagesquarantined filesreceived and sent data through firewall

If you wish to reset current statistics, tap Menu > Resetcounters.

NOTE: All statistical data get calculated starting from thelatest restart of the device.

Statistics

The Connections section (Menu > View > Connections)displays the applications used for sending and receivingdata.

Information includes: name of the processamount of data sentamount of data received

Connections

21

12. Troubleshooting and support

12.1 Troubleshooting

This section provides solutions to common questionsrelated to ESET Mobile Security.

12.1.1 Unsuccessful installation

The most common cause of an error message displayedduring installation is that the wrong version of ESETMobile Security has been installed on your device. Whendownloading the installation file from the ESET website,please make sure you are downloading the correctproduct version for your device.

12.1.2 Connection to update server failed

This error message is displayed after an unsuccessfulupdate attempt if the program is not able to contact theupdate servers.

Try the following solutions:1. Check your Internet connection – open your Internet

browser to http://www.eset.com to verify that you areconnected to the Internet

2. Verify that the program is using the correctupdate server – tap Menu > Settings > Update andyou should see updmobile.eset.com in the UpdateServer field.

12.1.3 Timeout downloading file

The Internet connection was unexpectedly slowed downor interrupted during the update. Try to run the updateagain later, please.

12.1.4 Update file missing

If you are trying to install new virus signature databasefrom the update file (esetav_wm.upd), the file must bepresent in the ESET Mobile Security installation folder (\Program Files\ESET\ESET Mobile Security).

12.1.5 Database file corrupted

The virus signature database update file (esetav_wm.upd)is corrupted. You need to replace the file and run theupdate again.

12.2 Technical support

For administrative assistance or technical support relatedto ESET Mobile Security or any other ESET securityproduct, our Customer Care specialists are available tohelp. To find a solution to your technical support issue,you can choose from the following options:

To find answers to the most frequently asked questions,access the ESET Knowledgebase at:http://kb.eset.com

The Knowledgebase contains an abundance of usefulinformation for resolving the most common issues withcategories and an advanced search.

To contact ESET Customer Care, use the support requestform available at:http://eset.com/support/contact.php